{"id":"https://openalex.org/W4412888510","doi":"https://doi.org/10.18653/v1/2025.findings-acl.482","title":"BadWindtunnel: Defending Backdoor in High-noise Simulated Training with Confidence Variance","display_name":"BadWindtunnel: Defending Backdoor in High-noise Simulated Training with Confidence Variance","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412888510","doi":"https://doi.org/10.18653/v1/2025.findings-acl.482"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.findings-acl.482","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.482","pdf_url":"https://aclanthology.org/2025.findings-acl.482.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.findings-acl.482.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035875884","display_name":"Ruyi Zhang","orcid":"https://orcid.org/0000-0002-6557-7711"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruyi Zhang","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114429773","display_name":"Songlei Jian","orcid":"https://orcid.org/0000-0001-5760-6431"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songlei Jian","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034435564","display_name":"Yusong Tan","orcid":"https://orcid.org/0000-0003-1233-5679"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yusong Tan","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101883590","display_name":"Heng Gao","orcid":"https://orcid.org/0000-0002-4741-699X"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heng Gao","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073429776","display_name":"Haifang Zhou","orcid":"https://orcid.org/0000-0001-5952-8983"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haifang Zhou","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101635100","display_name":"Kai L\u00fc","orcid":"https://orcid.org/0000-0002-4332-0042"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Lu","raw_affiliation_strings":["National University of Defense Technology / Changsha , Hunan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology / Changsha , Hunan , China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"9259","last_page":"9273"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11195","display_name":"Simulation Techniques and Applications","score":0.9460999965667725,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11195","display_name":"Simulation Techniques and Applications","score":0.9460999965667725,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9401564598083496},{"id":"https://openalex.org/keywords/variance","display_name":"Variance (accounting)","score":0.6984286904335022},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.6479755640029907},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6079353094100952},{"id":"https://openalex.org/keywords/confidence-interval","display_name":"Confidence interval","score":0.5532851219177246},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.5289903879165649},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.5060378909111023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3515673577785492},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.24122554063796997},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12766411900520325},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.05621430277824402},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.05577141046524048}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9401564598083496},{"id":"https://openalex.org/C196083921","wikidata":"https://www.wikidata.org/wiki/Q7915758","display_name":"Variance (accounting)","level":2,"score":0.6984286904335022},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.6479755640029907},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6079353094100952},{"id":"https://openalex.org/C44249647","wikidata":"https://www.wikidata.org/wiki/Q208498","display_name":"Confidence interval","level":2,"score":0.5532851219177246},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.5289903879165649},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.5060378909111023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3515673577785492},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.24122554063796997},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12766411900520325},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.05621430277824402},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.05577141046524048},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.findings-acl.482","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.482","pdf_url":"https://aclanthology.org/2025.findings-acl.482.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.findings-acl.482","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.482","pdf_url":"https://aclanthology.org/2025.findings-acl.482.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2277931485","display_name":null,"funder_award_id":"62421002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2309561981","display_name":null,"funder_award_id":"24-ZZCX-JDZ-07","funder_id":"https://openalex.org/F4320324150","funder_display_name":"National University of Defense Technology"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324150","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412888510.pdf","grobid_xml":"https://content.openalex.org/works/W4412888510.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4386185023"],"abstract_inverted_index":{"Current":[0],"backdoor":[1,27,55],"attack":[2,125],"defenders":[3],"in":[4,31,74,88,124],"Natural":[5],"Language":[6],"Processing":[7],"(NLP)":[8],"typically":[9],"involve":[10],"data":[11,86,112],"reduction":[12,123],"or":[13],"model":[14,53,103],"pruning,":[15],"risking":[16],"losing":[17],"crucial":[18],"information.To":[19],"address":[20],"this":[21],"challenge,":[22],"we":[23,33,96],"introduce":[24],"a":[25,35,69,98,119],"novel":[26],"defender,":[28],"i.e.,":[29],"BadWindtunnel,":[30],"which":[32,45,78],"build":[34],"highnoise":[36],"simulated":[37,76],"training":[38,50],"environment,":[39],"similar":[40],"to":[41,52,101],"the":[42,54,60,65,75,82,129],"wind":[43],"tunnel,":[44],"allows":[46],"precise":[47],"control":[48],"over":[49],"conditions":[51],"learning":[56,70],"behavior":[57,71],"without":[58],"affecting":[59],"final":[61],"model.We":[62],"also":[63],"use":[64],"confidence":[66],"variance":[67],"as":[68],"quantification":[72],"metric":[73],"training,":[77],"is":[79],"based":[80],"on":[81],"characteristics":[83],"of":[84],"backdoor-poisoned":[85],"(shorted":[87],"poisoned":[89,104,111],"data):":[90],"higher":[91,121],"learnability":[92],"and":[93,110],"robustness.In":[94],"addition,":[95],"propose":[97],"two-step":[99],"strategy":[100],"further":[102],"data,":[105],"including":[106],"target":[107],"label":[108],"identification":[109],"revealing.Extensive":[113],"experiments":[114],"demonstrate":[115],"BadWindtunnel's":[116],"superiority,":[117],"with":[118],"21%":[120],"average":[122],"success":[126],"rate":[127],"than":[128],"second-best":[130],"defender.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}